$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft File: nmoKpDnP40ewT3RoQKbkNMUJsac.mft (raw, json) Hash identifier: m/OFLK+wGoQHkIBFIo0DB6+nckvNToAbHKSGE0oaYJg= Subject key identifier: ED:73:7E:F7:7F:4B:56:0E:43:44:62:6A:86:8D:57:6F:CE:5D:C7:34 Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft Manifest number: 75 Signing time: Fri 17 May 2024 07:30:09 +0000 Manifest this update: Fri 17 May 2024 07:30:09 +0000 Manifest next update: Fri 24 May 2024 07:30:09 +0000 Files and hashes: 1: nmoKpDnP40ewT3RoQKbkNMUJsac.crl (hash: a8C7ePEEBCsZ4i0/Du7Xurq7C9m25xG8TvScTdlL6ig=) 2: 11A843B467D811EEA0543B5CC4F9AE02.roa (hash: C2POHe2THL0rS7QQam/RFbi9UJ+UKw6cNCZQX+7fstc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 07:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7 Validity Not Before: May 17 07:30:09 2024 GMT Not After : May 24 07:30:09 2024 GMT Subject: CN=66470781-3485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:fb:8e:4c:83:4c:62:25:fa:e0:f2:41:4e: 8c:61:f5:c8:1c:ed:2d:12:54:73:8b:41:01:fc:89: 49:06:4a:d5:6b:20:b3:b9:61:72:03:1c:27:4a:2e: fd:b7:72:f4:6a:b2:e9:c0:e9:ae:fa:f8:83:a9:ed: 83:cf:dc:66:94:5d:c9:33:68:68:75:96:ab:5f:52: 30:39:a9:ec:89:5e:b1:ee:ff:3d:99:03:7c:90:15: 7d:0b:29:94:c1:7b:0b:00:c1:aa:4d:bb:a1:9d:2d: 56:1c:a3:92:71:1e:64:3d:fe:1f:7d:3f:93:8b:ba: 1d:1a:50:59:83:99:d7:0f:89:d9:93:b7:43:24:e2: 62:55:d1:e9:cd:0a:6e:00:55:4e:a0:f5:16:20:5e: d3:c1:20:d9:a7:91:ff:52:4f:de:1e:9e:98:6b:59: 7a:53:02:55:e2:4c:84:5c:e1:eb:76:8b:52:a5:7b: 87:21:a4:97:14:fc:a3:8e:9c:36:e1:d7:1d:27:e6: 7f:bb:de:5f:bd:32:9f:ea:b9:46:12:e4:69:a6:59: 8c:3d:0b:d2:da:fb:61:cc:a6:98:3a:f0:a0:1b:30: de:f4:71:44:77:24:7a:1e:df:de:be:5f:8e:b5:66: 0d:48:a2:dc:e5:85:4f:89:95:03:8b:16:2b:cc:33: cf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:73:7E:F7:7F:4B:56:0E:43:44:62:6A:86:8D:57:6F:CE:5D:C7:34 X509v3 Authority Key Identifier: keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:d4:ad:7b:cc:5c:04:39:5d:27:81:d5:e4:e1:cb:1b:a8:db: ba:b9:1f:8e:0e:7a:98:3f:80:30:e3:80:c3:93:82:3e:46:73: b7:0a:0e:92:b9:b8:27:ca:a7:32:c0:cb:82:c2:85:94:ab:55: 8e:33:1b:84:31:f3:a8:65:31:f2:51:57:63:be:4f:6f:96:72: 8d:5b:61:e1:b3:99:bd:39:de:c8:30:d4:0c:8c:83:d1:bf:84: 8f:97:67:cf:22:13:75:94:f8:d2:94:9e:f5:0d:62:0a:3a:99: 18:2a:cc:f3:2f:4b:82:07:84:c8:ae:b9:43:35:af:0c:32:39: 6a:67:30:d1:e0:8b:8f:0b:3d:1b:7e:8e:19:0b:6d:d4:b7:9b: 07:e2:fb:ee:54:9d:46:ee:d4:9b:c7:77:e2:be:50:25:64:56: 12:11:e1:6e:95:1a:32:72:d3:15:b1:30:4e:c3:96:5f:0f:92: 22:77:5a:ec:e4:f1:34:4c:50:9a:0d:f8:86:bf:91:64:0e:d7: 73:0b:52:10:73:cd:91:96:b5:43:7f:50:19:ad:2f:e7:f1:91: b0:1a:59:7b:39:81:3e:4e:4f:89:ee:92:00:08:36:5c:fd:9c: 96:a7:aa:df:9c:11:63:41:7a:57:c3:41:dd:9b:5f:ae:b0:0a: 55:f2:77:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 REM1NjExMC8GA1UEBRMoOUU2QTBBQTQzOUNGRTM0N0IwNEY3NDY4NDBBNkU0MzRD NTA5QjFBNzAeFw0yNDA1MTcwNzMwMDlaFw0yNDA1MjQwNzMwMDlaMBgxFjAUBgNV BAMTDTY2NDcwNzgxLTM0ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF+fuOTINMYiX64PJBToxh9cgc7S0SVHOLQQH8iUkGStVrILO5YXIDHCdKLv23 cvRqsunA6a76+IOp7YPP3GaUXckzaGh1lqtfUjA5qeyJXrHu/z2ZA3yQFX0LKZTB ewsAwapNu6GdLVYco5JxHmQ9/h99P5OLuh0aUFmDmdcPidmTt0Mk4mJV0enNCm4A VU6g9RYgXtPBINmnkf9ST94enphrWXpTAlXiTIRc4et2i1Kle4chpJcU/KOOnDbh 1x0n5n+73l+9Mp/quUYS5GmmWYw9C9La+2HMppg68KAbMN70cUR3JHoe396+X461 Zg1IotzlhU+JlQOLFivMM8/NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7XN+939L Vg5DRGJqho1Xb85dxzQwHwYDVR0jBBgwFoAUnmoKpDnP40ewT3RoQKbkNMUJsacw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQzU2L0NEQkNGNjNBNjY5 MzExRUU5OENFQUE1MEM0RjlBRTAyL25tb0twRG5QNDBld1QzUm9RS2JrTk1VSnNh Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbm1vS3BEblA0MGV3VDNSb1FLYmtOTVVKc2FjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE QzU2L0NEQkNGNjNBNjY5MzExRUU5OENFQUE1MEM0RjlBRTAyL25tb0twRG5QNDBl d1QzUm9RS2JrTk1VSnNhYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEXUrXvMXAQ5XSeB1eThyxuo27q5H44Oepg/gDDjgMOTgj5Gc7cKDpK5 uCfKpzLAy4LChZSrVY4zG4Qx86hlMfJRV2O+T2+Wco1bYeGzmb053sgw1AyMg9G/ hI+XZ88iE3WU+NKUnvUNYgo6mRgqzPMvS4IHhMiuuUM1rwwyOWpnMNHgi48LPRt+ jhkLbdS3mwfi++5UnUbu1JvHd+K+UCVkVhIR4W6VGjJy0xWxME7Dll8PkiJ3Wuzk 8TRMUJoN+Ia/kWQO13MLUhBzzZGWtUN/UBmtL+fxkbAaWXs5gT5OT4nukgAINlz9 nJanqt+cEWNBelfDQd2bX66wClXyd5Q= -----END CERTIFICATE-----Generated at Fri May 17 08:52:47 2024 by rpki-client on console-ams.rpki-client.org